Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/QKSxaURXYKUag3B92MtpXJe2J-I.roa
File: QKSxaURXYKUag3B92MtpXJe2J-I.roa (raw, json)
Hash identifier: Tw2duoWGmEzrqlNhOdSkdaQK0AXfFEvY3LVGRANmlgQ=
Subject key identifier: 40:A4:B1:69:44:57:60:A5:1A:83:70:7D:D8:CB:69:5C:97:B6:27:E2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QKSxaURXYKUag3B92MtpXJe2J-I.roa
Signing time: Thu 15 Sep 2022 02:40:14 +0000
ROA not before: Thu 15 Sep 2022 02:40:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=40A4B169445760A51A83707DD8CB695C97B627E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:26:bc:ee:fe:98:0b:f0:b4:99:fa:64:af:
ac:6b:22:8d:59:ed:3f:e0:7a:be:b3:36:02:91:95:
01:f5:ba:f6:7d:5e:63:3d:fb:55:b6:f4:dd:64:62:
ba:bb:98:b8:f3:6b:09:a6:34:5d:3f:49:41:c8:41:
f5:b4:75:e5:1c:10:95:82:a1:b5:15:2f:c8:08:7c:
9e:97:32:77:c6:94:32:3b:62:bd:d4:7c:8c:04:8a:
82:e7:2d:b8:71:98:be:fc:75:22:02:49:21:70:f5:
a3:39:95:43:b0:e1:f9:85:0d:3c:b1:e9:a6:f5:01:
25:35:a8:e5:be:86:b0:02:a5:f9:8a:1a:48:d1:42:
a9:cf:04:5e:b4:8e:1d:e1:f7:27:0a:90:05:a9:b8:
1f:3c:2b:cd:56:e5:71:14:cf:bb:3b:3a:63:24:88:
6d:13:e1:1f:22:e6:b4:ee:82:95:03:21:07:86:45:
7f:c3:7a:3d:22:bf:dc:aa:fa:7c:76:17:e5:89:c9:
3c:6e:a8:ac:98:b4:87:fe:fc:42:ed:0e:f3:79:d7:
d1:a2:65:ef:77:33:7c:48:67:4e:e3:1a:29:99:5e:
ca:ce:31:4f:97:03:da:35:ba:50:c2:70:37:41:9d:
7f:9b:de:3b:94:04:c4:d6:cb:cc:26:0f:06:05:56:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:B1:69:44:57:60:A5:1A:83:70:7D:D8:CB:69:5C:97:B6:27:E2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QKSxaURXYKUag3B92MtpXJe2J-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:77:ba:dc:a6:46:ed:79:34:be:d7:69:0f:0b:d1:bb:fa:43:
b7:4e:89:e9:2c:3e:f7:22:5b:ef:74:f9:ab:ec:2f:de:44:cc:
0d:0b:32:78:b0:ed:a1:a1:67:a2:76:4f:1b:28:c0:79:14:cd:
2d:08:78:82:20:e0:dc:5d:a9:b3:ca:07:78:98:43:4f:07:a5:
ca:79:6d:99:3a:2f:6b:20:82:dd:12:19:fe:8b:fb:be:77:74:
a2:b5:cc:68:ae:e5:08:71:62:05:44:c8:31:f2:c1:fd:bf:a4:
94:7f:e1:67:49:69:20:09:4b:41:c2:cf:50:7b:d5:9c:31:25:
ca:18:6c:5c:23:10:bf:3b:70:72:4a:97:53:ba:f9:02:86:4f:
19:37:11:ff:a3:0e:84:5c:be:d0:e0:bf:bc:0c:e4:d4:0d:33:
a1:9e:78:72:8e:2f:17:82:6a:db:a2:1d:7b:9d:42:f4:c2:1f:
05:06:1f:6d:96:76:97:2e:0d:1f:30:97:00:cf:1e:0b:8a:1b:
ad:60:97:aa:2c:c7:7d:f8:d9:be:ef:63:c1:74:5b:b8:85:f8:
f1:3c:2a:69:d3:3f:9d:53:9a:c5:95:01:8e:34:e7:3e:3c:7a:
90:7b:c0:c1:32:01:cc:6a:9e:62:e5:8b:cf:4c:a0:1f:09:e6:
09:db:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:02 2025 by rpki-client